To: 



Page 7 of 10 



2006-03-02 18:06:40 (GMT) 



1 3602946426 From: Charles mirho 



Attorney Docket Number: FSP0030 
Client Reference Number: AWS 857.US 

Title: TERMINAL DEVICE IP ADDRESS AUTHENTICATION 
Application Number: 10/662,656 

-5- 

REMARKS 

In an office action mailed on 12/02/2005, claims 1-13 are rejected under 35 
U.S.C. 102(b) an being anticipated by Skog, US Pub. 2001/0028636. 

Claim 1 is cancelled, without prejudice. Claim 2 is amended into independent 
form to include the limitations of base claim 1. No new matter is added by the 
amendments. Furthermore, the amendments represent aspects of the original claims and 
do not raise new issues, do not require a new search, and do not require new grounds of 
rejection. 

Rejection of Claims 2-13 Re: Skog 

One aspect of claim 2 is logic which, when applied to the processor, results in 
locating a subscriber identifier corresponding to an IP address, locating subscriber 
information corresponding to the identifier, and determining whether a subscriber has 
access to a requested service in response to receiving a code from a terminal device, the 
code indicating that a unique username and password will not be provided by the terminal 
device . Skog provides no teaching of such a code from the terminal device. 

Skog teaches that in response to a request, the RADIUS server 165 performs an 
authentication process for the mobile terminal 155 with the user database 170 for the 
mobile terminal 155. The user database 170 (which may be associated with a server) 
contains information on the user of the mobile terminal 155 and may request a password 
or other authentication data. After authentication, the access server 160 generates an 
accounting start request message to the RADIUS server 165. The accounting start request 
message comprises a request from the access server 160 to the RADIUS server 165 to 
access a particular application and includes the MSISDN and IP address for the mobile 
terminal. 
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Skog provides no mention of receiving a code from the terminal device that 
indicates that the username and password will not be provided. 

One aspect of claim 3 is logic which, when applied to the processor, results in 
communication of the code and IP address to a service provider. Skog ('636), Page 3, 
paragraphs 0029-0030 teaches that after authentication, the access server 160 generates 
an accounting start request message to the RADIUS server 165. Hie accounting start 
request message comprises a request from the access server 160 to the RADIUS server 
165 to access a particular application and includes the MSISDN and IP address for the 
mobile terminal. Skog fails to teach that the IP address is provided to a service provider 
(as opposed to a RADIUS server, which is not a provider of terminal device services). 
Skog also fails to teach providing to a service provide a code from the terminal device 
that indicates that the username and password will not be provided. 

One aspect of claim 6 is logic which, when applied to the processor, results in 
querying a RADIUS server to locate the subscriber identifier corresponding to the IP 
address. Skog does not teach querying the RADIUS server for a subscriber ID 
corresponding to an IP address. Skog teaches that the request from the access server 160 
to the RADIUS server 165 to access a particular application already includes the 
MSISDN and IP address for the mobile terminal. 

One aspect of claim 7 is communicating to a network, in lieu of a user name and 
password, a code to cause the network to authenticate and authorize access to a service, 
the authentication and authorization based upon an IP address assigned to the terminal 
device by the network and upon a unique identifier provided by the terminal device to the 
network during an earlier attach process. 

First, Skog mentions authentication and does not discuss authorization. Second, 
Skog does not teach the terminal device communicating to a network, in lieu of a user 
name and password, a code to cause the network to authenticate and authorize access to a 
service. 
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Skog ('636), Page 3, paragraphs 0028-0029 teaches that when a mobile terminal 
155 requests use of a particular application pro vided by the service network 150, a 
request is transmitted to the RADIUS server 165 via the access server 160. In response to 
the request, the RADIUS server 165 performs an authentication process for the mobile 
terminal 155 with the user database 170 for the mobile terminal 155. The user database 
170 (which may be associated with a server) contains information on the user of the 
mobile terminal 155 and may request a password or other authentication data. After 
authentication, the access server 160 generates an accounting start request message to the 
RADIUS server 165. 

Again, Skog only discusses authentication and does not discuss authorization. 
Also no code is being communicated to the network in lieu of a user name and password. 

One aspect of claim 8 is client logic associated with a service provider, which, 
when applied to the processor to access the service provider, results in communicating 
the code (a code having the special meaning to indicate that a user name and password 
will not be provided) and IP address to the network in lieu of communicating a user name 
and password. There is no mention in Skog of the client having service provider-specific 
logic. There is no mention of communicating the IP address and a special code from the 
terminal device in lieu of user name and password. 

One aspect of claim 9 is receiving a code from a terminal device that indicates 
that a user name and password will not be provided by the terminal device. Again, Skog 
provides no mention of any such specific code. 

Another aspect of claim 9 is locating a subscriber identifier corresponding to an 
IP address of the terminal device, in response to receiving the code from the terminal 
device. Skog provides no teaching that a subscriber id is located in response to receiving 
such a code. 

One aspect of claim 10 is communicating the code and IP address to at least one 
service provider to obtain authorization for the services of the at least one service 
provider. Skog teaches authentication, not authorization. Furthermore, Skog teaches that 
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the IP address (but not the special code) are communicated to a RADIUS server for 
purposes of authentication, not to a service provider for purposes of authorization. And of 
course, Skog fails to teach at all the use of a special code from the terminal device 
indicating that name/password information will not be provided. 



Conclusion 



The claims include aspects that are not taught nor implied by Skog. The rejection 
of the claims under 35 U.S.C. 102(b) therefore cannot stand. Amendment has been made 
to claim 2 involving aspects of the original claims, for which no new matter is added, and 
for which no new search or new grounds of rejection are required. 

Signature /Charles A. Mirho/ Date: Thursday, March 02, 2006 

Charles A. Mirho 
Reg. 41,199 
Attorney for Applicant 
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